# cve.now: Semanticmediawiki

The newest entries naming Semanticmediawiki as an affected vendor (up to 200), of 38 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-126567](https://cve.now/CVE-2026-126567.md): Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via Special:Ask Debug Output (CVSS 5.1)
- [CVE-2026-126566](https://cve.now/CVE-2026-126566.md): Semantic MediaWiki 7.3.1 before 7.4.1 Incorrect Authorization via Edit Protection Annotations (CVSS 7.1)
- [CVE-2026-126565](https://cve.now/CVE-2026-126565.md): Semantic MediaWiki 3.0.0 before 7.4.1 DoS via Exponential Concept Expansion (CVSS 5.3)
- [CVE-2026-126564](https://cve.now/CVE-2026-126564.md): Semantic MediaWiki 2.5.0 before 7.4.1 Stored XSS via Special:Browse Factbox Title (CVSS 5.1)
- [CVE-2026-126563](https://cve.now/CVE-2026-126563.md): Semantic MediaWiki 2.4.0 before 7.4.1 Reflected XSS via Special:Ask Date Format (CVSS 5.3)
- [CVE-2026-126562](https://cve.now/CVE-2026-126562.md): Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreter (CVSS 5.3)
- [CVE-2026-126561](https://cve.now/CVE-2026-126561.md): Semantic MediaWiki 2.5.0 before 7.4.1 Missing Authorization via Is edit protected Annotation (CVSS 7.1)
- [CVE-2026-126560](https://cve.now/CVE-2026-126560.md): Semantic MediaWiki 3.0.0 before 7.4.1 Stored XSS via data-search Attributes (CVSS 5.1)
- [CVE-2026-126559](https://cve.now/CVE-2026-126559.md): Semantic MediaWiki 4.2.0 before 7.4.1 Stored XSS via Special:FacetedSearch (CVSS 4.8)
- [CVE-2026-116892](https://cve.now/CVE-2026-116892.md): SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile (CVSS 5.3)
- [CVE-2026-116891](https://cve.now/CVE-2026-116891.md): SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate (CVSS 5.1)
- [CVE-2026-116890](https://cve.now/CVE-2026-116890.md): Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API (CVSS 6.9)
- [CVE-2026-116889](https://cve.now/CVE-2026-116889.md): SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property (CVSS 5.3)
- [CVE-2026-116888](https://cve.now/CVE-2026-116888.md): SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading (CVSS 4.8)
- [CVE-2026-116887](https://cve.now/CVE-2026-116887.md): Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property (CVSS 5.3)
- [CVE-2026-116886](https://cve.now/CVE-2026-116886.md): Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse (CVSS 5.3)
- [CVE-2026-116885](https://cve.now/CVE-2026-116885.md): Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter (CVSS 5.3)
- [CVE-2026-116884](https://cve.now/CVE-2026-116884.md): SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data- Attributes (CVSS 5.3)
- [CVE-2026-116883](https://cve.now/CVE-2026-116883.md): Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions (CVSS 4.8)
- [CVE-2026-116882](https://cve.now/CVE-2026-116882.md): Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels (CVSS 4.8)
- [CVE-2026-116881](https://cve.now/CVE-2026-116881.md): Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete (CVSS 5.3)
- [CVE-2026-116880](https://cve.now/CVE-2026-116880.md): Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions (CVSS 7.1)
- [CVE-2026-116879](https://cve.now/CVE-2026-116879.md): Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task (CVSS 6.9)
- [CVE-2026-116878](https://cve.now/CVE-2026-116878.md): Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity (CVSS 8.7)
- [CVE-2026-116877](https://cve.now/CVE-2026-116877.md): Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set\_recurring\_event (CVSS 8.7)
- [CVE-2026-116876](https://cve.now/CVE-2026-116876.md): Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected (CVSS 7.1)
- [CVE-2026-116875](https://cve.now/CVE-2026-116875.md): SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters (CVSS 5.3)
- [CVE-2026-116874](https://cve.now/CVE-2026-116874.md): SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter (CVSS 5.3)
- [CVE-2026-116873](https://cve.now/CVE-2026-116873.md): Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update (CVSS 6.9)
- [CVE-2026-116872](https://cve.now/CVE-2026-116872.md): Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters (CVSS 8.7)
- [CVE-2026-116871](https://cve.now/CVE-2026-116871.md): Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask (CVSS 8.7)
- [CVE-2026-77616](https://cve.now/CVE-2026-77616.md): Semantic MediaWiki affected by reflected XSS in \`Special:Ask\` via a forged cursor pagination token (CVSS 6.1)
- [CVE-2026-77610](https://cve.now/CVE-2026-77610.md): Semantic MediaWiki has a query debug output XSS (\`DebugFormatter\`) (CVSS 6.1)
- [CVE-2026-77609](https://cve.now/CVE-2026-77609.md): Semantic MediaWiki has an open redirect in Special:URIResolver (CVSS 6.1)
- [CVE-2026-77607](https://cve.now/CVE-2026-77607.md): Semantic MediaWiki affected by Special:Ask table \`sep\` parameter reflected XSS (CVSS 6.1)
- [CVE-2026-77608](https://cve.now/CVE-2026-77608.md): Semantic MediaWiki has reflected XSS in \`Special:SearchByProperty\` (\`property\` and \`value\` parameters) (CVSS 6.1)
- [CVE-2026-77606](https://cve.now/CVE-2026-77606.md): Semantic MediaWiki has reflected XSS in Special:Ask plain table headers (CVSS 6.1)
- [CVE-2025-61682](https://cve.now/CVE-2025-61682.md): Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes (CVSS 8.6)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/semanticmediawiki
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.